CVE-2018-11156

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 14 of 46).

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2018-06-02

Last modified

2024-08-05

Weaknesses

CWE-78

Affected products

• Disk Backup (Quest)

References

• http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html
• http://seclists.org/fulldisclosure/2018/May/71
• https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities